Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/88GJqHEr8WkMPgrpixdNPLLiweU3xcCkHRKSwMYU3bqw/5/3137372e37302e3234382e302f32322d3234203d3e20323730363238.roa
File:                     3137372e37302e3234382e302f32322d3234203d3e20323730363238.roa (raw, json)
Hash identifier:          HrgY8bChA897IZrorN1AaaXfcx3TviwqP0zwImX7w2M=
Subject key identifier:   BE:0D:A8:D8:9F:88:FF:C8:16:8E:89:7F:8A:5C:C9:23:0E:40:65:96
Certificate issuer:       /CN=FFBC11B5DDB084014A261301018F4DAFBE36BCBB
Certificate serial:       47EE24B4E20BA362E40D474D766792558DF5C09B
Authority key identifier: FF:BC:11:B5:DD:B0:84:01:4A:26:13:01:01:8F:4D:AF:BE:36:BC:BB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FFBC11B5DDB084014A261301018F4DAFBE36BCBB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/88GJqHEr8WkMPgrpixdNPLLiweU3xcCkHRKSwMYU3bqw/5/3137372e37302e3234382e302f32322d3234203d3e20323730363238.roa
Signing time:             Thu 06 Mar 2025 19:00:00 +0000
ROA not before:           Thu 06 Mar 2025 18:55:00 +0000
ROA not after:            Fri 06 Mar 2026 19:00:00 +0000
asID:                     270628
IP address blocks:        177.70.248.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/88GJqHEr8WkMPgrpixdNPLLiweU3xcCkHRKSwMYU3bqw/5/FFBC11B5DDB084014A261301018F4DAFBE36BCBB.crl
                          rsync://rpki-repo.registro.br/repo/88GJqHEr8WkMPgrpixdNPLLiweU3xcCkHRKSwMYU3bqw/5/FFBC11B5DDB084014A261301018F4DAFBE36BCBB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FFBC11B5DDB084014A261301018F4DAFBE36BCBB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 28 Apr 2025 04:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:ee:24:b4:e2:0b:a3:62:e4:0d:47:4d:76:67:92:55:8d:f5:c0:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FFBC11B5DDB084014A261301018F4DAFBE36BCBB
        Validity
            Not Before: Mar  6 18:55:00 2025 GMT
            Not After : Mar  6 19:00:00 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:51:71:05:3a:c4:2a:ee:7a:89:94:57:88:43:
                    cd:98:12:9d:c3:73:ae:8f:00:a0:9a:b1:95:ee:86:
                    f5:f9:cf:37:fd:8a:91:67:a6:31:ef:3e:a1:2e:10:
                    5a:7e:eb:3c:2f:e8:3f:cd:0d:23:84:58:b5:12:65:
                    da:2c:47:a3:9c:df:ae:a8:a0:3a:79:72:8a:76:4c:
                    ee:e1:fc:58:ee:e6:4a:d9:ef:b2:8a:4e:d7:b6:f3:
                    26:0e:5b:73:dd:71:28:6c:bc:2e:1d:7c:13:bd:91:
                    85:e2:56:2d:d8:69:f6:38:32:4c:dd:ab:ea:2a:92:
                    1a:90:24:17:4e:75:36:79:40:8a:11:96:7e:da:7a:
                    d5:4c:95:58:77:f7:d4:23:27:c4:38:06:24:4a:dc:
                    4c:99:a4:fa:34:0f:a7:25:d0:6e:ac:be:30:0a:0a:
                    09:2a:af:cd:29:67:50:de:80:c1:d4:77:91:99:68:
                    7e:44:db:f9:da:76:71:58:86:89:d9:c3:10:cc:8b:
                    0b:d7:43:db:a9:cd:cd:69:5b:ea:0c:ad:ad:5c:8f:
                    8a:44:a8:d0:42:21:3c:24:7b:d2:10:b2:ae:e9:b7:
                    79:9c:32:a3:77:9a:14:e6:d2:06:90:f3:c4:73:3c:
                    8f:30:e8:1e:85:6e:9e:1f:f4:f6:36:1d:2b:89:4d:
                    d6:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:0D:A8:D8:9F:88:FF:C8:16:8E:89:7F:8A:5C:C9:23:0E:40:65:96
            X509v3 Authority Key Identifier:
                keyid:FF:BC:11:B5:DD:B0:84:01:4A:26:13:01:01:8F:4D:AF:BE:36:BC:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/88GJqHEr8WkMPgrpixdNPLLiweU3xcCkHRKSwMYU3bqw/5/FFBC11B5DDB084014A261301018F4DAFBE36BCBB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FFBC11B5DDB084014A261301018F4DAFBE36BCBB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/88GJqHEr8WkMPgrpixdNPLLiweU3xcCkHRKSwMYU3bqw/5/3137372e37302e3234382e302f32322d3234203d3e20323730363238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.70.248.0/22

    Signature Algorithm: sha256WithRSAEncryption
         53:19:c2:d6:1f:75:18:59:04:5c:ee:0f:0c:b0:77:75:3c:ce:
         50:2f:07:78:07:fb:2d:42:3c:7c:5c:a5:b1:cc:a8:80:61:5d:
         80:b6:93:16:6f:b9:98:13:9a:4e:73:ff:15:bc:8a:69:a6:f8:
         4f:4c:be:15:da:90:5f:72:87:76:d9:bd:83:19:f0:76:e9:f0:
         76:86:0e:a3:66:eb:4b:f4:34:53:f8:bc:c3:79:ee:ef:00:9c:
         34:a6:6b:04:03:d8:28:aa:4a:ce:ad:39:7e:ab:66:43:b9:63:
         d2:7b:49:a6:15:db:3d:4c:5b:3f:c9:70:31:6a:61:18:c1:f1:
         70:60:3c:92:7e:29:77:31:dc:d4:99:99:7d:e0:3f:19:19:07:
         e8:07:01:bf:36:f6:f6:b3:e8:0b:61:09:ea:38:35:67:54:c0:
         80:22:0c:c6:22:51:c4:86:f7:06:34:a4:6e:ec:ac:ea:01:b2:
         12:1c:06:9c:d6:80:21:cb:b7:23:c6:c4:f0:a0:86:8a:9e:e5:
         33:f4:21:a5:da:2c:1c:f9:bf:5a:cf:b3:d9:18:b6:1e:13:84:
         92:51:7d:34:e1:cd:37:47:37:16:68:26:65:ae:3c:2d:b6:1c:
         48:0f:de:cb:6c:09:8b:fe:7d:96:5e:6d:9d:db:0e:2d:ed:32:
         34:8a:04:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:33:54 2025 by rpki-client on console.sobornost.net